MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
Which TWO of the following are features of Microsoft Purview Information Protection?
⚠ Common exam trap
Many candidates confuse Data Loss Prevention (DLP) policies as a feature of Information Protection, but DLP is a separate workload that uses sensitivity labels as conditions rather than being a core component of Information Protection itself.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Sensitivity labels
Sensitivity labels are a core feature of Microsoft Purview Information Protection, allowing organizations to classify and protect sensitive data by applying labels that enforce encryption, access restrictions, and visual markings (e.g., headers/footers). These labels can be automatically applied based on content patterns or manually by users, and they persist with the data even when it leaves Microsoft 365, ensuring consistent protection across emails, documents, and other content.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Sensitivity labels
Why this is correct
Sensitivity labels are the cornerstone of Microsoft Purview Information Protection. They enable classification and protection by applying policy-driven settings such as encryption, visual markings, and access restrictions to emails and documents. These labels follow the content wherever it travels, and users can apply them manually or through auto-classification rules, ensuring consistent data governance across Microsoft 365 services.
- ✗
Data Loss Prevention (DLP) policies
Why it's wrong here
Data Loss Prevention (DLP) policies are a separate solution within Microsoft Purview, focused on inspecting content for sensitive data and enforcing actions to prevent leaks, such as blocking sharing or sending to non-compliant locations. They do not classify or protect the content itself; rather, they monitor and control data in transit and at rest. Because the question asks for features of Information Protection, DLP policies are incorrect even though they integrate with sensitivity labels.
- ✓
Encryption for emails and documents
Why this is correct
Encryption for emails and documents is a direct capability of sensitivity labels, making it a valid feature of Microsoft Purview Information Protection. When a label with encryption settings is applied, the content is encrypted with Azure Rights Management, which enforces user permissions and usage rights like read-only or no-forwarding. This ensures data remains protected both inside and outside the tenant, and it is a hallmark of information protection.
- ✗
eDiscovery (Premium)
Why it's wrong here
eDiscovery (Premium) is an advanced compliance workflow in Microsoft Purview used for legal investigations, regulatory requests, and litigation holds. It allows organizations to search, preserve, and review content sources including Exchange, SharePoint, Teams, and OneDrive, but its purpose is discovery and legal evidence, not data protection. Since it does not classify or encrypt data, it is not a feature of Information Protection and is therefore incorrect for this question.
- ✗
Azure Information Protection (AIP) scanner
Why it's wrong here
Azure Information Protection (AIP) scanner was designed for on-premises file repositories, such as file servers and SharePoint Server, to discover and label sensitive files. However, AIP has largely been consolidated into Microsoft Purview Information Protection, and the scanner is a legacy tool that does not represent the native, cloud-based labeling capabilities of Purview. As a result, it is not a feature of Microsoft Purview Information Protection, making it the wrong answer.
Go deeper
Related to this question
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.